All pull requests

Pull requests

• Bump zizmorcore/zizmor-action from 0.6.4 to 0.7.1 in the github-actions group across 1 directory

  dependenciesgithub_actions
  #3224·dependabot[bot] opened Oct 23, 2026Bot·

  ·
  1

• Accept Queenbee's previous API token during a rotation

  #3223·jeremy opened Oct 22, 2026Member·

  ·
  5

• Show fresh boards after a card is deleted or moved

  #3218·gjazali opened Oct 21, 2026·

  ·
  1

• Filter path credentials from kamal-proxy's logs

  #3216·jeremy opened Oct 20, 2026Member·

  ·
  3

• Sign direct uploads with a write-only storage credential

  #3215·jeremy opened Oct 20, 2026Member·

  ·
  11

• OAuth: delegation exchange for the hosted MCP server (RFC 8693)

  #3214·jeremy opened Oct 20, 2026Member·

  ·
  14

• Audience grants for the hosted MCP server and bind each to one account (phase B)

  #3213·jeremy opened Oct 20, 2026Member·

  ·
  7

• HELD: Design the OAuth consent screen and Connected apps (Decision 8)

  #3212·jeremy opened Oct 20, 2026Member·

  ·
  6

• HELD: Run hosted Fizzy MCP as a dark fizzy_mcp accessory on iad's web hosts

  #3209·jeremy opened Oct 19, 2026Member·

  ·
  11

• Record each redeemed authorization code, so one can't mint again once its grant is gone

  #3206·jeremy opened Oct 17, 2026Member·

  ·
  20

• Issue personal access tokens from a first-party client, and backfill existing ones onto it

  #3205·jeremy opened Oct 17, 2026Member·

  ·
  53

• Report OAuth audit events and export OAuth metrics

  #3204·jeremy opened Oct 17, 2026Member·

  ·
  59

• Drop the plaintext personal access token column (D3 of 3: drop identity_access_tokens.token)

  #3203·jeremy opened Oct 17, 2026Member·

  ·
  54

• Store personal access tokens only as digests (D2 of 3: rerun the backfill, stop the plaintext)

  #3202·jeremy opened Oct 17, 2026Member·

  ·
  42

• Bump thruster from 0.1.26 to 0.1.27

  dependenciesruby
  #3199·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  1

• Bump aws-sdk-s3 from 1.232.1 to 1.233.2

  dependenciesruby
  #3198·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  1

• Bump selenium-webdriver from 4.50.0 to 4.51.0 in the development-dependencies group

  dependenciesruby
  #3197·dependabot[bot] opened Oct 16, 2026Bot·

  ·
  1

• Record where Fizzy stands against our OAuth rubric

  #3193·jeremy opened Oct 15, 2026Member·

  ·
  27

• Store tokens and client secrets as digests (D1 of 3: read by digest, plaintext fallback)

  #3192·jeremy opened Oct 15, 2026Member·

  ·
  48

• Pin today's token and session authentication for shipped clients

  #3191·jeremy opened Oct 15, 2026Member·

  ·
  3

• Bump rails from 4658033 to 48dc419

  dependenciesruby
  #3182·dependabot[bot] opened Oct 9, 2026Bot·

  ·
  2

• Publish to fizzy-edge; v* releases are promoted by basecamp/release-images

  #3173·jeremy opened Oct 8, 2026Member·

  ·
  7

• Fix comment Post button staying disabled after pasting

  #3172·piotrsynowiec opened Oct 7, 2026·

  ·
  1

• Preserve board columns and scroll when returning from a card

  #3171·piotrsynowiec opened Oct 7, 2026·

  ·

• Add previous and next card navigation within columns

  #3170·piotrsynowiec opened Oct 7, 2026·

  ·
  2